@skaile/workspaces 5.11.0 → 5.13.0

package/dist/{chunk-VLTQGE2E.js → chunk-HBZD3MIW.js}

@@ -1,36 +1,36 @@
-import { WorkspacePlugin } from './chunk-6O2X3GPW.js';
-import { buildWorkspaceToolDefs } from './chunk-IER3KIPH.js';
-import { findAiAssetsRoot } from './chunk-T42WRQ4O.js';
-import { WebSocketServerTransport } from './chunk-5LKOAX7I.js';
+import { WorkspacePlugin } from './chunk-J4DB5G36.js';
+import { buildWorkspaceToolDefs } from './chunk-NDUYFYJB.js';
+import { findAiAssetsRoot } from './chunk-2BIESC6S.js';
+import { WebSocketServerTransport } from './chunk-OQ5MKDS3.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
-import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-NWDSLXOX.js';
-import { resolveFlowPath } from './chunk-3SM2DL2T.js';
-import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-GCHPUTA3.js';
-import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-4A4OD24G.js';
-import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-R7NHYEJF.js';
-import { EventNormalizer } from './chunk-T7CTHHG7.js';
-import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-HCEVNYSH.js';
+import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-PHRNUTSG.js';
+import { resolveFlowPath } from './chunk-GMDSRSGI.js';
+import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-ZU24LWBI.js';
+import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-Y4Z7LGSH.js';
+import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-5SKVCMRC.js';
+import { EventNormalizer } from './chunk-6NQDDCIL.js';
+import { probeResumeTranscript, transcriptStoreForRuntime } from './chunk-YTZFSKWL.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
 import { dispatchCapability } from './chunk-2H73V6XR.js';
 import { classifyClaudeSdkError } from './chunk-B4X2N7JQ.js';
 import { agentExecRequested } from './chunk-YROR332M.js';
-import { driverCapabilities, toAgentEffort, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-47U4GZ4M.js';
-import { loadFlow } from './chunk-TCHRMVTO.js';
-import { parseFlowDefinition } from './chunk-D3B36CYC.js';
+import { unresolvedProviderCredentials, driverCapabilities, toAgentEffort, createDriver, catalogLayer, providerCredentialEnvName, toMergedRegistry, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-BVJU2GKE.js';
+import { loadFlow } from './chunk-XBYSURMK.js';
+import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
 import { renderStimulusPrompt } from './chunk-M3WPBTGJ.js';
 import { TERMINAL_AGENT_RUN_STATUSES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-F4NJDSR7.js';
-import { knowledgeKindProvider, scanLibraryRoot } from './chunk-2F5AWQX5.js';
-import { createDefaultKindRegistry } from './chunk-J4RBUFGM.js';
-import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-ZCAJZ4B2.js';
-import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-PBBPZYVG.js';
-import { resolveRuntimeAssets } from './chunk-EDYHEMJA.js';
+import { knowledgeKindProvider, scanLibraryRoot } from './chunk-DKGEV6SQ.js';
+import { createDefaultKindRegistry } from './chunk-NVO6WECE.js';
+import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema } from './chunk-57SF6W6E.js';
+import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-BF422IDP.js';
+import { resolveRuntimeAssets } from './chunk-QO7CR3KB.js';
 import { DEFAULT_DRIVER_ID, resolveDriverPaths } from './chunk-5BEFNLOR.js';
-import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-ALEYHUC5.js';
+import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, resolveAgentDefinitionDir, AgentRefResolutionError, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-L3ZGYSWY.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
-import { driverTargetForDriver, SUPPORTED_DRIVER_TARGETS, DRIVER_TARGETS } from './chunk-CPSIPIX7.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-SBSA3IQA.js';
-import { parseAssetRef } from './chunk-BNMZVPYA.js';
-import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DALV4HHP.js';
+import { driverTargetForDriver, SUPPORTED_DRIVER_TARGETS, DRIVER_TARGETS } from './chunk-IG5LZ3WU.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-M3P4BYRK.js';
+import { parseAssetRef } from './chunk-J4OYIYFQ.js';
+import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DKXNKFKP.js';
 import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-MJHSLODD.js';
 import { getLogStore, registerLogStore, createLogger, resetLogStore, isUnwritableStreamError, markStreamBroken, isBrokenPipeError, redactCredentials } from './chunk-BOFL7GIF.js';
 import { __require } from './chunk-NSBPE2FW.js';
@@ -61,6 +61,39 @@ import mime from 'mime';
 import { homedir } from 'os';
 import { Worker } from 'worker_threads';
 
+// runner/src/final-text.ts
+function messageText(message) {
+  if (!message) return "";
+  if (typeof message.content === "string") return message.content;
+  if (!Array.isArray(message.content)) return "";
+  return message.content.filter((block) => block.type === "text" && block.text).map((block) => block.text).join("");
+}
+function createFinalTextFallback(write) {
+  let streamed = false;
+  return (event) => {
+    if (event.type === "message_start") {
+      streamed = false;
+    } else if (event.type === "message_update") {
+      if (event._textDelta) streamed = true;
+    } else if (event.type === "message_end") {
+      const hadStream = streamed;
+      streamed = false;
+      if (hadStream || event.message?.role !== "assistant") return;
+      const text2 = messageText(event.message);
+      if (text2) write(text2);
+    }
+  };
+}
+
+// runner/src/credential-notice.ts
+function unresolvedCredentialNotices(session) {
+  if (session.driverType !== "omp") return [];
+  return unresolvedProviderCredentials(session.registry, {
+    env: { ...process.env, ...session.credentialEnv }
+  }).map(
+    (u) => `provider '${u.providerId}' is not used: ${u.reason}; omp falls back to its own login (check with \`skaile providers test ${u.providerId}\`)`
+  );
+}
 var PreInitRingSink = class {
   ring = [];
   cap;
@@ -1138,12 +1171,31 @@ async function resolveItem(item, binding, source, compileManifest, runSnapshot,
         item.ref
       );
     }
+    if (implicit) await assertConventionItemUnedited(item, compiled2, source);
     return asResolved(item, binding, compiled2, "compiled");
   }
-  if (binding === "discoverable" && compiled2)
+  if (binding === "discoverable" && compiled2) {
+    if (implicit) await assertConventionItemUnedited(item, compiled2, source);
     return asResolved(item, binding, compiled2, "compiled");
+  }
   return fromSource(item, binding, source);
 }
+async function assertConventionItemUnedited(item, compiled2, source) {
+  let live;
+  try {
+    live = await source.load(item.ref, item.kind);
+  } catch (err) {
+    if (err instanceof CompositionError && err.code === "composition_asset_missing") return;
+    throw err;
+  }
+  if (live.sha256 === compiled2.hash) return;
+  throw new CompositionError(
+    "composition_conflict",
+    "hash_mismatch",
+    `"${item.ref}" (${item.kind}): the file hashes to ${live.sha256.slice(0, 12)}\u2026 but compile_manifest.json records ${compiled2.hash.slice(0, 12)}\u2026 \u2014 it was edited after \`skaile rebuild\`; run \`skaile rebuild\` to pin the edit or restore the file with \`skaile install\``,
+    item.ref
+  );
+}
 async function resolveSubagentItem(item, binding, source, compileManifest, runSnapshot) {
   const captured = findEntry(runSnapshot?.items, item, void 0);
   if (captured) return asResolved(item, binding, captured, "run-snapshot");
@@ -3671,7 +3723,11 @@ function nestedLauncher(deps) {
       agentDir: target.agentDir,
       sessionId: ctx.run.sessionId,
       ...Number.isFinite(maxTurns) ? { maxTurns } : {},
-      ...modelPreferred ? { modelRef: modelPreferred } : {}
+      // `model` is what the primary session hands the driver (`--model`); a registry
+      // session resolves `modelRef` first. Both are set, so the role runs on its own
+      // `model.preferred` whether or not a provider registry is configured, not on the
+      // parent's model or the driver default.
+      ...modelPreferred ? { model: modelPreferred, modelRef: modelPreferred } : {}
     });
     const release2 = async () => {
       session.driver.kill();
@@ -3868,10 +3924,17 @@ async function createStandaloneAgentSurface(opts) {
 }
 
 // runner/src/composition/prompt-sections.ts
-function buildRunnerAgentSections(resolved, promptExtensions) {
+function buildRunnerAgentSections(resolved, promptExtensions, options = {}) {
+  const blocks = resolved?.inlineBlocks ?? [];
+  const memory = resolved?.memoryBlocks ?? [];
+  const seedsFromSoul = memory.some((m) => m.source?.replace(/^\.\//, "") === "SOUL.md");
+  const soul = options.includeSoul && !seedsFromSoul ? blocks.filter((block) => block.implicit && block.kind === "soul").map((block) => block.content.trim()).filter(Boolean).join("\n\n") : "";
+  const duties = blocks.filter((block) => block.implicit && block.kind === "prompt").map((block) => block.content.trim()).filter(Boolean).join("\n\n");
   return buildAgentPromptSections({
-    memory: resolved?.memoryBlocks ?? [],
-    composed: (resolved?.inlineBlocks ?? []).filter((block) => !block.implicit).map((block) => ({ text: block.content, source: block.ref })),
+    soul,
+    memory,
+    duties,
+    composed: blocks.filter((block) => !block.implicit).map((block) => ({ text: block.content, source: block.ref })),
     promptExtensions: promptExtensions.map((e) => ({ text: e.value, source: e.source }))
   });
 }
@@ -3918,6 +3981,9 @@ function buildContextSection(context) {
   return lines.join("\n");
 }
 var execFileAsync = promisify(execFile);
+function runsInContainer() {
+  return existsSync("/.dockerenv") || existsSync("/run/.containerenv") || process.env.KUBERNETES_SERVICE_HOST !== void 0;
+}
 var PROBE_TIMEOUT_MS = 1500;
 var VERSION_PROBES = [
   { label: "Python", bin: "python3", args: ["--version"] },
@@ -3976,7 +4042,7 @@ async function buildEnvironmentSection(projectDir) {
   const lines = [
     "## Environment",
     "",
-    "You are running inside an isolated container with the following tools available:",
+    runsInContainer() ? "You are running inside an isolated container with the following tools available:" : "You are running on the user's machine with the following tools available:",
     ""
   ];
   if (runtimes.length > 0) {
@@ -6106,7 +6172,9 @@ async function createAgentSession(config) {
     log: sessionLog
   }) : null;
   composition = await withHostMemory(composition, config.loadHostMemory, sessionLog);
-  const agentSections = buildRunnerAgentSections(composition, promptExtensions);
+  const agentSections = buildRunnerAgentSections(composition, promptExtensions, {
+    includeSoul: driverType === "omp"
+  });
   const disposeManagedTools = managed ? await registerCodexResourceTools({
     registry: config.capabilityRegistry,
     manager: resourceManager,
@@ -6441,7 +6509,7 @@ function createSessionDriver(args) {
 // runner/src/agent.ts
 var PROMPT_AGENT = `${pc.magenta(pc.bold("agent"))} ${pc.dim("\u25B6")} `;
 function stderrWarnings(line) {
-  if (line.startsWith("[warn]") || line.startsWith("[error]")) {
+  if (line.startsWith("[warn]")) {
     process.stderr.write(`${line}
 `);
   }
@@ -6477,22 +6545,40 @@ async function runAgentChat(opts) {
     throw error;
   }
   const driver = agentSession.driver;
+  for (const notice of unresolvedCredentialNotices(agentSession)) {
+    console.error(`  ${pc.yellow("!")} ${notice}`);
+  }
   await driver.start();
+  const bareAnswer = process.stdout.isTTY !== true;
+  let plainAnswer = "";
   let firstChunk = true;
   const mdStream = new MarkdownStreamer();
+  const writeText = (text2) => {
+    if (bareAnswer) {
+      plainAnswer += text2;
+      return;
+    }
+    if (firstChunk) {
+      process.stdout.write(PROMPT_AGENT);
+      firstChunk = false;
+    }
+    mdStream.write(text2);
+  };
+  const printUnstreamed = createFinalTextFallback(writeText);
   driver.on("agent-event", (event) => {
     opts.onEvent?.(event);
+    printUnstreamed(event);
     if (event.type === "message_update") {
       const delta = event._textDelta;
-      if (delta) {
-        if (firstChunk) {
-          process.stdout.write(PROMPT_AGENT);
-          firstChunk = false;
+      if (delta) writeText(delta);
+    } else if (event.type === "message_retract") {
+      if (bareAnswer) {
+        if (plainAnswer.endsWith(event.text)) {
+          plainAnswer = plainAnswer.slice(0, plainAnswer.length - event.text.length);
         }
-        mdStream.write(delta);
+      } else {
+        mdStream.retract(event.text);
       }
-    } else if (event.type === "message_retract") {
-      mdStream.retract(event.text);
     }
   });
   let message = opts.message;
@@ -6503,14 +6589,23 @@ ${message}`;
   }
   try {
     await new Promise((resolve4, reject) => {
+      let settled = false;
       const onEvent = (event) => {
         if (event.type === "agent_end") {
+          settled = true;
           driver.off("agent-event", onEvent);
-          mdStream.end();
-          process.stdout.write("\n");
+          if (bareAnswer) {
+            const answer = plainAnswer.trim();
+            if (answer) process.stdout.write(`${answer}
+`);
+          } else {
+            mdStream.end();
+            process.stdout.write("\n");
+          }
           driver.kill();
           resolve4();
         } else if (event.type === "error" && event.retrying !== true) {
+          settled = true;
           driver.off("agent-event", onEvent);
           const err = Object.assign(new Error(String(event.error)), {
             detail: event.detail
@@ -6522,6 +6617,8 @@ ${message}`;
       };
       driver.on("agent-event", onEvent);
       driver.prompt(message).catch((err) => {
+        if (settled) return;
+        settled = true;
         driver.off("agent-event", onEvent);
         chatLog.error("prompt failed", err);
         driver.kill();
@@ -6671,6 +6768,38 @@ function deliveryFor(item, binding, target) {
   }
   return "unsupported";
 }
+
+// runner/src/composition/verify.ts
+async function verifyConventionItems(opts) {
+  const compileManifest = await loadCompileManifestFromDir(opts.agentDir);
+  if (!compileManifest) return [];
+  const files = await hashAgentFiles(opts.agentDir);
+  const items = effectiveComposes(
+    [],
+    files.map((f) => f.path)
+  );
+  const source = createCompositionContentSource({
+    agentDir: opts.agentDir,
+    projectDir: opts.projectDir,
+    registry: opts.registry
+  });
+  const drifted = [];
+  for (const item of items) {
+    const binding = resolveBinding(item);
+    if (binding === "inline-live") continue;
+    const compiled2 = compileManifest.entries.find(
+      (e) => e.asset_ref === item.ref && e.kind === item.kind && e.binding === binding
+    );
+    if (!compiled2) continue;
+    try {
+      await assertConventionItemUnedited(item, compiled2, source);
+    } catch (err) {
+      if (err instanceof CompositionError) drifted.push(err);
+      else throw err;
+    }
+  }
+  return drifted;
+}
 var ResourceOperationError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -7393,6 +7522,20 @@ async function handleSessionRootResourceRequest(command, rootDir, emit) {
 }
 async function dispatchResourceRequest(command, deps) {
   const { resourceManager, projectDir, emit } = deps;
+  if (typeof command.connectorId !== "string" && "resourceId" in command) {
+    const aliased = command.resourceId;
+    if (typeof aliased === "string") command = { ...command, connectorId: aliased };
+  }
+  if (typeof command.connectorId !== "string" || command.connectorId.length === 0) {
+    emit({
+      type: "resource_response",
+      requestId: command.requestId,
+      resourceId: "",
+      operation: command.operation,
+      error: "resource_request needs a string `connectorId` (the connector or mount id)"
+    });
+    return;
+  }
   if (command.connectorId === SESSION_ROOT_CONNECTOR_ID) {
     await handleSessionRootResourceRequest(command, projectDir, emit);
     return;
@@ -11621,6 +11764,18 @@ function takeRunnerWsAuthToken(env = process.env, fs9 = nodeFs) {
   return { source: "none" };
 }
 
+// runner/src/ws-auth-warning.ts
+function isLoopbackHost(host) {
+  const h = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  return h === "localhost" || h === "::1" || /^127(?:\.\d{1,3}){3}$/.test(h);
+}
+function wsNoAuthWarning(port, host) {
+  if (host !== void 0 && isLoopbackHost(host)) {
+    return `WARNING: the WebSocket server on port ${port} listens on ${host}; local processes can drive this agent. Set SKAILE_WS_AUTH_TOKEN for a token.`;
+  }
+  return `WARNING: the WebSocket server on port ${port} listens on ${host ?? "all interfaces"} without authentication: any host that can reach the port can drive this agent. Set SKAILE_WS_AUTH_TOKEN, or bind 127.0.0.1 with --host.`;
+}
+
 // runner/src/serve.ts
 function getSessionCatalogEntries(session) {
   return session?.runtimeAssets?.catalogEntries ?? [];
@@ -12460,6 +12615,7 @@ async function startAgentServer(opts) {
     projectDir: opts.projectDir,
     yamlBlock: wsConfig.logging,
     onLog: opts.onLog,
+    ...opts.stdout === void 0 ? {} : { stdout: opts.stdout },
     // Broker mode has no host-side trim of this file; see logging-bootstrap.ts.
     enforceRetention: true
   });
@@ -12472,6 +12628,9 @@ async function startAgentServer(opts) {
   serverLog.info("ws auth token", {
     source: opts.authToken ? "caller" : takenAuthToken.source
   });
+  if (!opts.transport && !authToken) {
+    serverLog.warn(wsNoAuthWarning(opts.port ?? 8080, opts.host));
+  }
   if (takenAuthToken.unlinkError)
     serverLog.warn("ws auth token file could not be removed", {
       code: takenAuthToken.unlinkError
@@ -12499,10 +12658,21 @@ async function startAgentServer(opts) {
   const agentDir = opts.agentDir ?? resolveAgentDir(opts.projectDir);
   if (agentDir) {
     serverLog.info("agent dir resolved", { agentDir });
+  } else if (wsConfig.agent?.definition) {
+    serverLog.warn(
+      `agent.definition "${wsConfig.agent.definition}" in skaile.yaml did not resolve to a directory`
+    );
   } else {
-    serverLog.warn("no agent definition found in skaile.yaml");
+    serverLog.debug(
+      "no agent definition (agent.definition) in skaile.yaml; running without a persona"
+    );
   }
-  const transport = opts.transport ?? new WebSocketServerTransport({ port, onLog: log, ...authToken ? { authToken } : {} });
+  const transport = opts.transport ?? new WebSocketServerTransport({
+    port,
+    onLog: log,
+    ...opts.host ? { host: opts.host } : {},
+    ...authToken ? { authToken } : {}
+  });
   logStore.addSink(
     new WsLogSink({
       send: (event) => {
@@ -13805,6 +13975,29 @@ async function startAgentServer(opts) {
       return false;
     }
   }
+  function wireRunnerCapabilities() {
+    wireSessionCapabilities({
+      capabilityRegistry,
+      remoteCapabilityInvoker,
+      getResourceManager: () => resourceManager,
+      getPreMintedSecrets: () => preMintedSecrets,
+      emitResourcesAvailable,
+      driverPicksUpToolsLive,
+      getOrCreateMcpManager: () => agentSession?.getOrCreateExternalMcpManager() ?? null,
+      getCompactionOrchestrator: () => compactionOrchestrator,
+      getProjectDir: () => opts.projectDir,
+      attachSkillInstance,
+      detachSkillInstance,
+      registerLiveAttachedMcp,
+      scheduleDriverRestartForToolChanges,
+      getDriver: () => driver ?? null,
+      rememberReconfigure: (patch) => {
+        liveReconfigurePatch = { ...liveReconfigurePatch, ...patch };
+        applyReconfigurePatch(sessionConfig, patch);
+      },
+      log
+    });
+  }
   async function buildSessionFromInit(secrets, fallbackConnectorDeclarations) {
     const wireRegistry = managedCodex ? void 0 : wireAgentConfig?.registry;
     const credentialEnv = wireRegistry ? registryCredentialEnv(wireRegistry, {
@@ -13859,27 +14052,6 @@ async function startAgentServer(opts) {
       needsWireAgentConfigRecreate = true;
       appliedWireAgentConfigKey = wireKey;
     }
-    wireSessionCapabilities({
-      capabilityRegistry,
-      remoteCapabilityInvoker,
-      getResourceManager: () => resourceManager,
-      getPreMintedSecrets: () => preMintedSecrets,
-      emitResourcesAvailable,
-      driverPicksUpToolsLive,
-      getOrCreateMcpManager: () => agentSession?.getOrCreateExternalMcpManager() ?? null,
-      getCompactionOrchestrator: () => compactionOrchestrator,
-      getProjectDir: () => opts.projectDir,
-      attachSkillInstance,
-      detachSkillInstance,
-      registerLiveAttachedMcp,
-      scheduleDriverRestartForToolChanges,
-      getDriver: () => driver ?? null,
-      rememberReconfigure: (patch) => {
-        liveReconfigurePatch = { ...liveReconfigurePatch, ...patch };
-        applyReconfigurePatch(sessionConfig, patch);
-      },
-      log
-    });
     return { needsWireFallbackRecreate, needsWireAgentConfigRecreate };
   }
   async function recreateAgentSession(overrides) {
@@ -14258,9 +14430,11 @@ async function startAgentServer(opts) {
         agentVersion: PROTOCOL_VERSION,
         platformVersion: cmd.protocolVersion
       });
+      runtimeRejected = true;
       await cleanup();
       teardownProcessHandlers();
       disposeLogStore();
+      await transport.close();
       return;
     }
     try {
@@ -14357,6 +14531,7 @@ async function startAgentServer(opts) {
     registerInitClientCapabilities(cmd.capabilities ?? []);
     capabilityRegistry.setRemoteInvoker(remoteCapabilityInvoker);
     await refreshAgentSurface(null);
+    wireRunnerCapabilities();
     sendEvent({
       type: "protocol_info",
       version: PROTOCOL_VERSION,
@@ -15018,6 +15193,19 @@ async function startAgentServer(opts) {
       case "capability_approve":
         handleCapabilityApprove(cmd);
         break;
+      default: {
+        const raw = cmd;
+        const unknownType = typeof raw === "object" && raw !== null && "type" in raw ? raw.type : void 0;
+        const label = typeof unknownType === "string" ? `"${unknownType}"` : "(no type)";
+        const hint = unknownType === "state_action" ? " `state_action` was removed in protocol v3; use the runner.set_state capability." : "";
+        log(`[serve] dropping unknown command ${label}`);
+        sendEvent({
+          type: "error",
+          fatal: false,
+          category: "validation",
+          message: `Unknown command ${label}: this runner does not handle it.${hint}`
+        });
+      }
     }
   }
   transport.onCommand((cmd) => {
@@ -15033,6 +15221,20 @@ async function startAgentServer(opts) {
       replayed: true
     });
   });
+  transport.onConnect(() => {
+    if (managedHost && !managedBootstrapClosed)
+      sendEvent({
+        type: "protocol_info",
+        version: PROTOCOL_VERSION,
+        runtimeFeatures: supportedRuntimeFeatures
+      });
+    else if (initAcknowledged && sessionReadyOutcome !== "rejected")
+      sendEvent({
+        type: "protocol_info",
+        version: PROTOCOL_VERSION,
+        runtimeFeatures: supportedRuntimeFeatures
+      });
+  });
   transport.onConnect(() => {
     if (!eventGapBuffer.hasPending) return;
     if (!initAcknowledged || sessionReadyOutcome === "rejected") {
@@ -15055,20 +15257,6 @@ async function startAgentServer(opts) {
     if (!initAcknowledged || managedCodex || aiProviderConfigId === void 0) return;
     aiCredentialRefreshScheduler.ensureArmed();
   });
-  transport.onConnect(() => {
-    if (managedHost && !managedBootstrapClosed)
-      sendEvent({
-        type: "protocol_info",
-        version: PROTOCOL_VERSION,
-        runtimeFeatures: supportedRuntimeFeatures
-      });
-    else if (initAcknowledged && sessionReadyOutcome !== "rejected")
-      sendEvent({
-        type: "protocol_info",
-        version: PROTOCOL_VERSION,
-        runtimeFeatures: supportedRuntimeFeatures
-      });
-  });
   await transport.listen();
   if (secretsMode === "env" && agentSession) {
     agentSession.startWatching();
@@ -15275,6 +15463,6 @@ function touchSession(state) {
   return { ...state, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, validateInputResponse, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
-//# sourceMappingURL=chunk-VLTQGE2E.js.map
-//# sourceMappingURL=chunk-VLTQGE2E.js.map
+export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptDriver, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, driverActiveAfterTurnEnd, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsDriverRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveMixin, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
+//# sourceMappingURL=chunk-HBZD3MIW.js.map
+//# sourceMappingURL=chunk-HBZD3MIW.js.map